Allowing the use of the IDFA by publishers and not by advertisers renders it useless, since it can no longer be used for attribution. I don't think conversion tracking - measuring the performance of ads you bought to promote your app - counts as spying.